Draft pending legal review. Last updated: 19 August 2026.
WebBoard uses the following sub-processors to provide the service. As data controller, your school is informed of changes to this list before they take effect.
- Application and database hosting: netcup GmbH, Germany (EU).
- Live video and recording infrastructure: self-hosted LiveKit on Hetzner Online GmbH and netcup GmbH servers, Germany (EU); LiveKit Cloud (LiveKit Inc., USA) may be used as a failover, protected by Standard Contractual Clauses.
- File and recording storage: Cloudflare R2 object storage (Cloudflare Inc., USA parent; Standard Contractual Clauses).
- Email delivery: Twilio SendGrid (USA; Standard Contractual Clauses).
- Payment processing: Stripe Payments Europe Ltd (Ireland) and PayPal (Europe) S.a r.l. et Cie, S.C.A. (Luxembourg); card details are handled by them, we do not store card numbers.
- Single sign-on: Google, Microsoft and Meta (Facebook), only if you choose to sign in with them.
- Optional integrations you connect yourself: Google Drive and Google Calendar, Microsoft (Outlook) calendar, Dropbox; used only after you link the account and only for the linked purpose.
Some providers may process data outside the EEA; where they do, we rely on appropriate safeguards such as the European Commission's Standard Contractual Clauses. For questions, see the contact page.